| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-23249 | 4.0 | GigaVUE-OS (GVOS) 5.4 - 5.9 stores a Redis database password in plaintext. | 2021-01-08 16:04:00 | 2021-01-05 22:15:00 |
| CVE-2020-4762 | 6.5 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow an authenticated user to create a privileged account due to improper access controls. IBM X-Force ID: 188896. | 2021-01-08 16:04:00 | 2021-01-05 15:15:00 |
| CVE-2020-4761 | 5.0 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This inform | 2021-01-08 15:52:00 | 2021-01-05 15:15:00 |
| CVE-2020-23250 | 2.1 | GigaVUE-OS (GVOS) 5.4 - 5.9 uses a weak algorithm for a hash stored in internal database. | 2021-01-08 15:47:00 | 2021-01-05 22:15:00 |
| CVE-2020-36156 | 6.5 | An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Authenticated Privilege Escalation via Profile Update. Any user with wp-admin access to the profile.php page could supply the parameter um-role with a value set to | 2021-01-08 14:55:00 | 2021-01-04 18:15:00 |
| CVE-2020-36051 | 5.0 | Directory traversal vulnerability in page_edit.php in MiniCMS V1.10 allows remote attackers to read arbitrary files via the state parameter. | 2021-01-08 14:44:00 | 2021-01-05 22:15:00 |
| CVE-2020-36052 | 7.5 | Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbitrary files via the state parameter. | 2021-01-08 14:41:00 | 2021-01-05 22:15:00 |
| CVE-2017-6484 | 4.3 | Multiple Cross-Site Scripting (XSS) issues were discovered in INTER-Mediator 5.5. The vulnerabilities exist due to insufficient filtration of user-supplied data (c and cred) passed to the "INTER-Mediator-master/Auth_Support/PasswordReset/resetpasswor | 2021-01-08 13:59:00 | 2017-03-05 20:59:00 |
| CVE-2017-5594 | 4.3 | An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the registered user's password, when the debug toolbar is enabled. The password is successfully recovered using this exploit. The SecureL | 2021-01-08 13:52:00 | 2017-01-25 18:59:00 |
| CVE-2017-5233 | 6.8 | Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer. | 2021-01-08 13:48:00 | 2017-03-02 20:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: